CN206532131U - Automation equipment, device controller and automation equipment in Process Control System will be arranged on - Google Patents
Automation equipment, device controller and automation equipment in Process Control System will be arranged on Download PDFInfo
- Publication number
- CN206532131U CN206532131U CN201620553955.4U CN201620553955U CN206532131U CN 206532131 U CN206532131 U CN 206532131U CN 201620553955 U CN201620553955 U CN 201620553955U CN 206532131 U CN206532131 U CN 206532131U
- Authority
- CN
- China
- Prior art keywords
- process control
- device controller
- application
- access
- automation equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000012369 In process control Methods 0.000 title claims abstract description 21
- 238000010965 in-process control Methods 0.000 title claims abstract description 21
- 238000004886 process control Methods 0.000 claims abstract description 258
- 230000002040 relaxant effect Effects 0.000 claims abstract 2
- 230000006870 function Effects 0.000 claims description 43
- 238000004891 communication Methods 0.000 claims description 18
- 238000004519 manufacturing process Methods 0.000 claims description 3
- 238000000926 separation method Methods 0.000 claims 3
- 238000000034 method Methods 0.000 description 71
- 230000008569 process Effects 0.000 description 43
- 238000007726 management method Methods 0.000 description 23
- 241001269238 Data Species 0.000 description 5
- 230000008859 change Effects 0.000 description 4
- 238000011900 installation process Methods 0.000 description 4
- 230000005540 biological transmission Effects 0.000 description 3
- 238000012544 monitoring process Methods 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- TVZRAEYQIKYCPH-UHFFFAOYSA-N 3-(trimethylsilyl)propane-1-sulfonic acid Chemical compound C[Si](C)(C)CCCS(O)(=O)=O TVZRAEYQIKYCPH-UHFFFAOYSA-N 0.000 description 2
- 230000009471 action Effects 0.000 description 2
- 230000003139 buffering effect Effects 0.000 description 2
- 238000001514 detection method Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 239000012530 fluid Substances 0.000 description 2
- 238000009434 installation Methods 0.000 description 2
- 238000005259 measurement Methods 0.000 description 2
- 239000000523 sample Substances 0.000 description 2
- 238000004088 simulation Methods 0.000 description 2
- 206010000117 Abnormal behaviour Diseases 0.000 description 1
- 238000002679 ablation Methods 0.000 description 1
- 238000013459 approach Methods 0.000 description 1
- 238000013475 authorization Methods 0.000 description 1
- 238000013070 change management Methods 0.000 description 1
- 238000007796 conventional method Methods 0.000 description 1
- 230000008878 coupling Effects 0.000 description 1
- 238000010168 coupling process Methods 0.000 description 1
- 238000005859 coupling reaction Methods 0.000 description 1
- 238000007405 data analysis Methods 0.000 description 1
- 238000003745 diagnosis Methods 0.000 description 1
- 235000013399 edible fruits Nutrition 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000002955 isolation Methods 0.000 description 1
- 230000014759 maintenance of location Effects 0.000 description 1
- 230000000737 periodic effect Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 239000007858 starting material Substances 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/468—Specific access rights for resources, e.g. using capability register
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0426—Programming the control sequence
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/418—Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/23—Pc programming
- G05B2219/23406—Programmer device, portable, handheld detachable programmer
Landscapes
- Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Computer Security & Cryptography (AREA)
- Manufacturing & Machinery (AREA)
- Quality & Reliability (AREA)
- Computer Hardware Design (AREA)
- Stored Programmes (AREA)
- Programmable Controllers (AREA)
Abstract
Disclose automation equipment, device controller and the automation equipment that will be arranged in Process Control System.Device controller is associated with the automation equipment that will be arranged in Process Control System.Device controller includes device controller manager, and the device controller is communicably coupled to main frame by device controller manager, and main frame provides device controller and the automation equipment in the Process Control System.Device controller also includes erector, and process control application is installed in the application space in the firmware of device controller by erector, and process control is applied and provides permissions data by main frame.Device controller also includes application framework processor, and application framework processor is used for：The process control application in application space is performed, process control is applied to be extended to the function of device controller；And access of the process control using the physical resource to device controller is relaxed, permissions data defines the rule that the access to the physical resource of device controller is applied for relaxing process control.
Description
Technical field
Put it briefly, present disclosure is related to automation equipment of the control in Process Control System, more specifically, relates to
And the customized application environment in offer process control equipment.
Background technology
Process Control System (as chemistry, oil or it is other during use Process Control System) generally include
One or more system controllers, these system controllers via simulation, numeral or combination analog/digital bus communication ground coupling
Close at least one main frame or operator's work station and be communicably coupled to one or more automation equipments.Automation equipment
(it can be such as valve, valve positioner, switch and conveyer (for example, temperature sensor, pressure sensor and flow-velocity sensing
Device)) function of being such as turned on and off valve and measurement process parameters etc is performed in Process Control System.Process controller
The signal and/or the other information relevant with automation equipment for the process measurement for indicating to be carried out by automation equipment are received, is used
The information realizes control routine, and then generates control signal, and the control signal passes through bus or other communication lines are sent out
Automation equipment is given with the operation of control process control system.
Utility model content
In view of limiting the flexibility of device controller to the conventional method that device controller is updated, and it may require that big
There is provided a kind of automation that will be arranged in Process Control System of illustrative disclosure for the time of amount and this problem of resource
Equipment, the automation equipment includes：Device controller manager, the device controller manager by device controller communicatedly
It is coupled to main frame.Exemplary host is used to provide the device controller and the automation equipment in Process Control System.Example
Automation equipment disclosed in property also includes：Process control application is installed to described by erector (installer), the erector
In application space in the firmware of device controller.Example process control application provides permissions data by the main frame.Example
Automation equipment disclosed in property also includes：Application framework processor (handler), the application framework processor is configured as：
The process control application in the application space is performed, the work(of device controller described in the process control application extension
Energy；And access of the process control using the physical resource to the device controller is relaxed, the permissions data is limited
The access with which of physical resource physical resource is applied in the process control.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor is configured as the application for keeping separating with the firmware memory space in the device controller
Memory space, wherein, the process control is applied with the access to the application memory space, but without to the firmware
The access of memory space.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor is configured as providing to process control application to be led to the network of the device controller
The access of letter, the permissions data specifies the frequency that the process control application can be communicated with the main frame.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor is configured as providing the automation to the device controller to process control application
The access of equipment communication, the permissions data specifies what the process control application can be communicated with the automation equipment
Frequency.
In one example, the permissions data is specified to when process control application can set with the automation
It is standby to carry out the logical condition that communication is adjusted.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor is configured as：Data space is kept, the process control application writes data into
To the data space with shared with the firmware of the device controller；And it is described to relax based on the permissions data
Process control is using the access to the data space.
In one example, the process control application is at least one under situations below to provide：Work as installation
There is provided when the process control is applied by the main frame；Or provided when manufacturing the device controller by manufacturer.
There is provided a kind of device controller of illustrative disclosure, the device controller is with being arranged in Process Control System
Automation equipment be associated, the device controller includes：Device controller manager, the device controller manager is used
In the device controller is communicably coupled into main frame.Exemplary host provides the equipment in the Process Control System
Controller and the automation equipment.Example devices controller also includes erector, and the erector is used for process control
Using in the application space being installed in the firmware of the device controller.Example process control application is provided by the main frame
Permissions data.Example devices controller also includes application framework processor, and the application framework processor is described for performing
The function of being used for extending the device controller is applied in the process control application in application space, the process control, with
And access of the process control using the physical resource to the device controller is relaxed, the permissions data is defined for delaying
The rule of the access to the physical resource of the device controller is applied with the process control.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor keeps the application memory separated with the firmware memory space in the device controller empty
Between, wherein, the process control is applied with the access to the application memory space, but without empty to firmware storage
Between access.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor provides the visit of the network service to the device controller to process control application
Ask, the permissions data specifies the frequency that the process control application can be communicated with the main frame.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor provides to process control application and the automation equipment of the device controller is communicated
Access, the permissions data specifies the frequency that the process control application can be communicated with the automation equipment.
In one example, the permissions data is specified to when process control application can set with the automation
It is standby to carry out the logical condition that communication is adjusted.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor keeps data space, the process control application writes data into the data space
With shared with the firmware of the device controller.
In one example, applied to relax the process control to the physical resource of the device controller
Access, the application framework processor is relaxed the process control based on the permissions data and applied to the data space
Access.
A kind of exemplary automation equipment is additionally provided, the automation equipment includes being used to lead to the device controller
It is coupled to the unit of main frame letter.Exemplary host provide the device controller in the Process Control System and it is described from
Dynamicization equipment.Exemplary automation equipment also includes being used to be installed to process control application in the firmware of the device controller
Application space in unit.Example process control application provides permissions data by the main frame.Exemplary automation equipment
Also include being used to perform the unit of the process control application in the application space.Example process control application extension is shown
The function of example property device controller.Exemplary automation equipment also includes being used to relax the process control using to the equipment
The unit of the access of the physical resource of controller.Example rights data definition is used to relax example process control application to showing
The rule of the access of the physical resource of example property device controller.
In one example, it is described to be used to relax the process control using the physics money to the device controller
The unit of the access in source causes the device controller to keep what is separated with the firmware memory space in the device controller to answer
With memory space, wherein, the process control is applied with the access to the application memory space, but without to described solid
The access of part memory space.
In one example, it is described to be used to relax the process control using the physics money to the device controller
The unit of the access in source causes the device controller to provide the network to the device controller to process control application
The access of communication, the permissions data specifies the frequency that the process control application can be communicated with the main frame.
In one example, it is described to be used to relax the process control using the physics money to the device controller
The unit of the access in source causes the device controller to be provided to process control application to the automatic of the device controller
Change the access of equipment communication, the permissions data specifies the process control application to be communicated with the automation equipment
Frequency.
In one example, the permissions data is specified to when process control application can set with the automation
It is standby to carry out the logical condition that communication is adjusted.
In one example, the device controller is configured as keeping data space, and the process control application
It is configured as writing data into the data space with shared with the firmware of the device controller.
According to the utility model, the function of the device controller in Process Control System can be extended and/or more
Newly without updating firmware and the operation of device controller need not be interrupted, and there is provided safety and stability.
Brief description of the drawings
Fig. 1 shows example process control system.
Fig. 2 shows the example devices controller with the customized application environment for automation equipment.
Fig. 3 shows the implementation of Fig. 2 exemplary application manager.
Fig. 4 is to represent that the flow chart of the illustrative methods of the application manager to realize Fig. 2 and Fig. 3 can be performed.
Fig. 5 is to represent that the flow of another illustrative methods of the application manager to realize Fig. 2 and Fig. 3 can be performed
Figure.
Fig. 6 is the block diagram of example processor system, wherein example processor system be configured to perform it is machine readable
Instruction is to perform the method represented by Fig. 4 and/or Fig. 5, so as to realize Fig. 2 and Fig. 3 exemplary application manager.
Embodiment
Put it briefly, present disclosure is related to the automation equipment in Process Control System, more specifically, and being related to is used for
Method, equipment and the product of customized application environment in process control equipment (for example, device controller) are provided.Process control system
System includes work station and/or server, and these work stations and/or server are controlled with the system in Process Control System
Device, device controller and/or automation equipment are interacted.In example disclosed herein, except by device controller
Beyond main process control function performed by firmware, device controller also implementation procedure control application.Automation equipment can be with
Such as valve, valve positioner, switch and conveyer, and can with implementation procedure control function, be for example turned on and off valve and
Measuring process control parameter.In addition to management automation equipment, device controller is also based on receiving from automation equipment
Information generate process data (for example, process control information).Process data can include process statistics, alarm, monitoring letter
Breath, process tendency information, diagnostic message, automation equipment status information and/or the message from automation equipment.Show at some
In example, device controller can be integrated into automation equipment.Alternatively or additionally, in some instances, device controller
Automation equipment can be wired or wirelessly connected to.
Device controller performs firmware, to be communicated such as with main frame (for example, work station, server), and automatic
Change equipment to be communicated and/or generating process data.Generally, in order to update the function of device controller, the device controller is made
Offline and its firmware is updated.Alternatively, the image release of firmware is updated on backstage and is switched to the work of firmware
Dynamic version.In addition, in order to provide customization function, the module to firmware or firmware is changed and recompilated.This method limit
The flexibility of device controller has been made, and may require that substantial amounts of time and resource.
In example disclosed herein, the firmware of device controller includes application space.Application space allows to process
The function of controller is extended and/or is updated without to update firmware and need not interrupt the operation of process controller.Below
In shown example, it can be downloaded in application space and implementation procedure controls application to be set without changing firmware or resetting automation
It is standby.In order to provide safety and stability, application space isolates with the remainder of firmware.
Application manager is by sequestering memory (for example, read-only storage (ROM), random access memory (RAM), hard
Disk, solid-state memory etc.) a part limit application space, can store and held in application space in the part of memory
Capable process control application, and can be from part reading process control application of memory and/or can be to memory
The partial write process control application.In addition, not being defined in memory can not be read and/or be write to process control application
Other regions for application space.In example disclosed herein, application manager relaxes the physics to device controller
The access of resource (for example, network service, automation equipment communication, sensor, actuator etc.).In some instances, using pipe
Reason device by control to the accessibility of the function of firmware (for example, read-only access, read-write access, sent to main frame and/
Or the ability of message etc. that receives) relax process control application.For example, application manager can allow process control application reading
The message and/or data sent by automation equipment is taken, but process control can be prevented to apply and sends out message (for example, command signal)
Give automation equipment.Application manager can also control to access the frequency of physical resource.For example, application manager can be limited
Process control application can transmit the message to the frequency of main frame (for example, to prevent accidental or malice refusal from servicing formula
(denial-of-service) attack etc.).
In example disclosed herein, process control is using associated with permissions data.Permissions data defines process
Access of the control application to the physical resource of device controller.For example, permissions data be able to will can be disappeared with assignment procedure control application
Breath is sent to main frame, but is not sent to automation equipment.In these examples, include being used for message if process control is applied
The instruction of automation equipment is sent to, then application manager does not provide corresponding function to process control application.Show at some
In example, manufacturer can be directed to device controller (for example, the within hardware, in firmware etc.) setting manufactured for different clients
Different authorization policies.For example, for safety purposes, client may decide that the equipment control in some Process Control Systems
The process control application performed on device does not transmit the message to automation equipment.
Applied using process control and send exemplary permissions data to device controller.In some instances, if
Process control application has been installed but not associated with permissions data, then application manager not implementation procedure control application.At some
In example, permissions data is created creating when process control is applied.In these examples, answered when via the control of main frame installation process
Used time, user is pointed out to confirm (for example, receiving) permissions data.In some instances, it is generated separately power with process control application
Limit data.For example, permissions data can be generated when application is installed on device controller.In some such examples, in peace
When dress process control is applied, it is process control application selection authority to point out user.
In some instances, in order to prevent malicious application from obtaining the access to the function of process controller firmware, authority number
In the permissions data repository separated according to that can be stored in corresponding process control application and in the corresponding process of installation
Fetched during control application.In some such examples, Kernel-based methods control application to precalculate authentication value.For example, can make
Hashed value is calculated with process control application.In these examples, when to come via main frame installation process control apply when, be based on
Process control application calculates new authentication value.In these examples, if the authentication value newly calculated and the certification precalculated
Value matching, then authority is retrieved and sends process controller to.In these examples, the matching is represented, from establishment authority
Process control application is not changed after data.Alternately or in addition, in some instances, permissions data is signed comprising numeral
Name.In these examples, except non-authentication digital signature (for example, via corresponding public key), otherwise main frame and/or equipment control
Device does not install permissions data.
Application manager also includes application framework processor, and application framework processor is provided between application space and firmware
Interface.In some instances, process control application can be compiled instruction set.In these examples, application framework is handled
Process control of the device into application space apply provide in firmware function library (for example, network service function, from
Dynamicization equipment communication function etc.) access.In some instances, process control application can be script.In these examples, should
The access of script and offer to the function (for example, scripting hooks) in firmware is explained with framework.In these examples, mistake
The thing that (for example, via library function call, via hook etc.) access process controller is asked to application manager is applied in process control
Manage resource, and application manager with the associated permissions data of process control application based on permitting or refuse the request.Such as
Fruit application manager permits the request, then application manager allows the library function call to firmware.If for example, process control should
The positional value of the position sensor on valve actuator is read with request, then application manager will fetch the value (for example, please to firmware
Seek the value), and pass it to process control application.
Fig. 1 shows example process control system 100, and the example process control system 100 can combine this paper institutes
Customized application environment in the device controller of description is used.Example process control system 100 using be integrated with one or
Multiple intelligent plant abilities (including fieldbus 102 is (such asAnd/or FOUNDATIONTMFieldbus), at a high speed from
Dissipate bus, embedded senior control and senior unit and bulk management) plant processes control framework.Process Control System
The network automatically equipment 104,106 of fieldbus 102 and/or device controller 108 in 100 are provided for various application (bags
Include device management, configuration, monitoring and diagnosis etc.) infrastructure.
In the illustrated example, Process Control System 100 includes exemplary automation equipment 104,106, example devices
Controller 108a, 108b, exemplary system controller 110, exemplary I/O devices 112a, 112b and exemplary host 114.
Exemplary I/O equipment 112a, 112b promotes exemplary system controller 110 and exemplary automation equipment 106 and/or exemplary
Communication between device controller 108a.Exemplary I/O devices 112a, 112b support modules, to be automated with each
Equipment 106 and/or example devices controller 108a are communicated (for example, via numeral and/or analogue communication).For example, I/O
Equipment 112b can have analog module, to be docked with automation equipment 106 (for example, three-wire type temperature probe etc.), and
Digital module, to be docked with device controller 108a.Exemplary I/O devices 112a, 112b is from exemplary automation equipment 106
And/or example devices controller 108a receives data, and convert the data into can be by exemplary system controller 110
The communication of reason.In addition, exemplary I/O devices 112a, 112b is by the data from exemplary system controller 110 and/or communication
Be converted to the form that can be handled by exemplary automation equipment 106 and/or example devices controller 108a.In some examples
In, I/O devices 112a, 112b and device controller 108 are combined into a unit.
Exemplary automation equipment 104,106 can be for example including controlling and monitoring the fluid in Process Control System 100
One or more instrument of (for example, fluid, gas, semifluid etc.).Automation equipment 104,106 can be for example including valve, cause
Dynamic device, sensor, probe, proximity switches, motor starter, driver etc..Example devices controller 108a, 108b are controlled
And/or monitor exemplary automation equipment 104,106.In the illustrated example, device controller 108a, 108b from it is exemplary from
Dynamicization equipment 104,106 read (for example, data from sensor etc.) and/or produce to exemplary automation equipment 104,
106 control signal (for example, with position of control valve, with speed of controlled motor etc.).For example, device controller 108a,
108b can receive the data from position sensor and/or other sensors, and can transmit control signal with control valve and/
Or other devices.
Exemplary automation equipment 104 is communicably coupled to device controller 108a.In some such examples, equipment control
Device 108a processed can be integrated into automation equipment 104.For example, the hardware of the actuator in control valve can be with equipment control
Device 108a is in identical shell.Alternatively, device controller 108a can be separated with automation equipment 104.In some instances,
Device controller 108b can be integrated with I/O equipment 112b.
In the illustrated example, device controller 108a, 108b perform firmware, with to from exemplary automation equipment 104,
106 and/or the data that receive of system controller 110 handled.The scope of example firmware can be from offer basic function (example
Such as, data reporting, to control of automation equipment 104,106 etc.) firmware to provide Premium Features (for example, calculate processing number
According to generation alarm data etc.) firmware.Firmware includes application space, performs and is for example downloaded from main frame 114 in the application space
Process control application.Process control is applied carrys out expansion equipment controller for example, by performing the function of not including in firmware
The function of 108a, 108b firmware.For example, process control application can with calculating process data, auto-control equipment 104,
106, generation warning etc..In some instances, firmware can perform multiple process control application in application space and/or provide
Multiple application spaces.In some instances, device controller 108a, 108b firmware can have basic function (for example, read/
Report sensor data, generation control signal etc.), and process control application in application space can be used for equipment for customizing control
Device 108a, 108b processed function.In this way, reduce the demand updated to firmware and increase equipment for customizing controller
The ability of 108a, 108b function.
Exemplary system controller 110 is coupled to via wired or wireless network (for example, LAN, WAN, internet etc.)
Exemplary host 114.The control routine of exemplary system controller 110, so as to based on from automation equipment 104,106 and/or
Device controller 108a, 108b output carry out calculating process data for process control application, including such as supervision application, report
Alert management application, process trend and/or historical usage, diagnostic application, batch processing and/or advertisement management applications, statistics application, stream
Formula transmission Video Applications, senior control application, safety instrument application, event application etc..System controller 110 is with periodic intervals
And/or process data is transmitted to main frame 114 in processing or generating process data.The process sent by system controller 110
Data can include process control, data value, warning message, text, block schema elements status information, diagnostic message, error
Message, parameter, event and/or device identifier.
In Fig. 1 in shown example, main frame 114 may include one or more work stations 116 and/or server 118, with
Execution system control application.System control application is communicated with example controller 110, to monitor, control and/or diagnose
Example devices controller 108a, 108b and/or exemplary automation equipment 104,106 in process control system 100.For example,
Process control application can include that auto-control, the figure of Process Control System 100 be represented, change management, process control are compiled
Volume, data acquisition, data analysis etc..In some instances, work station 116 controls to apply via user interface display system, with
Just process data is presented in a graphic format, with enable the user of work station 116 check to graphically (via application) by
The process data that example devices controller 108a, 108b and/or exemplary automation equipment 104,106 are generated.Show at some
In example, when process control, which is applied, to be performed on server 118, operator can be set up from work station (for example, work station 116)
To the long-range connection of server 118, control to apply with access process.
Exemplary host 114 includes exemplary application database 120.The storage of exemplary application database 120 can be installed
It is excessively program control in the application space of one or more of Process Control System 100 device controller 108a, 108b firmware
System application.In some instances, the process control application that work station 116 can be used in management equipment controller 108a, 108b
Install and uninstall.In order to which installation process controls to apply, work station 116 is via system controller 110 and I/O equipment 112a, 112b
Process control is applied from application database 120 (for example, being transmitted via block) and is sent to device controller 108a, 108b.
In Fig. 1 example shown, exemplary host 114 includes example rights database 122.Permissions data is limited
Process control applies the access to device controller 108a, 108b physical resource and/or process control application when can
The logical condition that enough access equipment controller 108a, 108b physical resource are adjusted.For example, permissions data can be specified
Process control application can transmit the message to main frame 114, but can not send control signals to automation equipment 104,106.Lift another
One example, when receiving the message for permitting the access from main frame 114, permissions data can be with assignment procedure control application
Communicated with automation equipment 104,106.When process control application is sent to device controller 108a, 108b, authority
Data are sent to device controller 108a, 108b.In some instances, if process control, which is applied, is arranged on device controller
108a, 108b are upper but not associated with permissions data, then device controller 108a, 108b firmware answers implementation procedure control
With.
In some instances, permissions data is created when establishment process control is applied.In some instances, will be excessively program control
System application is sent to before device controller 108a, 108b via main frame 114, points out user to receive permissions data.For example, work
Stand 116 can show with process control apply associated permissions data, and can provide button for user press with instruction
Receive permissions data.In some instances, if user does not receive permissions data, main frame 114 will not be by process control application
It is sent to device controller 108a, 108b.In some instances, it is generated separately power via main frame 114 and process control application
Limit data.For example, when process control application is sent into device controller 108a, 108b, user can be pointed out to select authority
Data.For example, work station 116 can show can be included in permissions data possibility authority (for example, from automation equipment 104,
106 read, write to automation equipment 104,106 etc.), and allow which power user's selection will include in permissions data
Limit.
In some instances, as manufacturing equipment controller 108a, 108b, device controller 108a, 108b manufacturer
Make device controller 108a, 108b that there is permissions data.In some such examples, permissions data set by manufacturer by
The process control application performed on device controller 108a, 108b is used.For example, can include being used for device controller
108a, 108b permissions data, it prevents the process control application slave phase being arranged on device controller 108a, 108b corresponding
Automation equipment 104,106 reads and/or write to corresponding automation equipment 104,106.In these examples, it is excessively program control
Application processed can not access corresponding automation equipment 104, and associated authority is applied but regardless of with specific process control
How is authority set by data.
In some instances, in order to which the process control application for preventing malice obtains the access to the function of firmware, when incited somebody to action
When process control application is sent to device controller 108a, 108b, the authority number being stored in rights database 122 is individually sent
According to.In some instances, precalculate expected authentication value (for example, hashed value etc.) and be stored in rights database 122.Example
Such as, after ablation process control application, process control can be applied and uses hash function, to produce expected authentication value.
In these examples, when to be applied via the control of the installation process of main frame 114, Kernel-based methods control application to calculate new certification
Value.In these examples, if the authentication value newly calculated and the matching of expected authentication value, permissions data are retrieved and sent to
Process controller 108a, 108b.Alternately or in addition, in some instances, it is stored in the authority number in rights database 122
According to the digital signature including being generated according to DSS (DSS) using private key.In these examples, connect when from main frame 114
When receiving permissions data, device controller 108a, 108b verify digital signature using the public key corresponding with private key.At these
In example, if digital signature empirical tests, device controller 108a, 108b install permissions data.Otherwise, in these examples
In, if digital signature is invalidated, device controller 108a, 108b abandon permissions data.
Fig. 2 shows the example implementations of the device controller 108 with firmware 202, and wherein firmware 202 includes using
The exemplary customized application space 204 using 206 is controlled in implementation procedure.In the illustrated example, device controller 108 includes
Example firmware 202 and exemplary physical resource 208.In the illustrated example, physical resource 208 includes example processor
210th, example memory 212, exemplary non-volatile storage facilities 214 (for example, flash memory, hard disk etc.), illustrative sensors
216th, exemplary bus I/O 218 and exemplary automation equipment I/O 220.Example firmware 202 includes exemplary application
Space 204, exemplary application manager 222 and example devices controller management device 224.
Example devices controller management device 224 includes the function using physical resource 208.For example, device controller pipe
Reason device 224 can be sent and received via bus 102 (Fig. 1) to main frame 114 (Fig. 1) message.In some instances, equipment control
Device manager 224 processed can also include the function of management automation equipment 104,106 (Fig. 1).For example, device controller manager
224 can read from the sensor (for example, pressure sensor, position sensor etc.) of automation equipment 104,106, calculate and miss
Difference, and automation equipment 104,106 is sent control signals to, to keep desired set point.In the illustrated example, equipment
Controller management device 224 also manages the shared of example processor 210 and application manager 222, to allow device controller pipe
The reason running-course control function of device 224 and permission application manager 222 implementation procedure control to apply 206.
In fig. 2 in shown example, application manager 222 manages the example performed in exemplary application space 204
Property process control applies 206.In order to which application space 204 is isolated with device controller manager 224, exemplary application manager
222 divide example memory 212 and/or example memory device between application space 204 and device controller manager 224
214.The isolation is kept, overriding device controller manager 224 is made by accident or maliciously using 206 to prevent process control
Memory value.Example process control is stored in example memory 212 and/or example memory equipment 214 using 206
In be specified in the part of application space 204.In addition, example process control can only be deposited using 206 from exemplary
Read and to the partial write part for being specified for application space 204 in reservoir 212 and/or example memory device 214.
When process control is asked to memory 212 and/or the write-in of storage facilities 214 using 206, example application manager 222 is managed
The request, and the partial write specified by example memory 212 and/or example memory equipment 214.Work as process control
Using 206 requests from memory 212 and/or storage facilities 214 read when, exemplary application manager 222 manages the request, and
Read from the part specified by example memory 212 and/or example memory equipment 214.
In the illustrated example, application manager 222 provides application framework processor, and 206 are applied to relax process control
Access to the physical resource 208 of device controller 108.Process control can be compiled instruction set or script using 206.
When process control is using the instruction set that 206 be compiling, application manager 222 is provided to function library to process control using 206
Access, with the physical resource 208 of access equipment controller 108.When process control is script using 206, application manager
222 explain script, and provide the access (physical resource 208 of access equipment controller 108) to function.Example process control
System is using 206 things that (for example, being called via storehouse, via hook etc.) access equipment controller 108 is asked to application manager 222
Manage resource 208.
In some instances, application manager 222 and device controller manager 224 define memory 212 and/or storage
Deposit the data space 225 in equipment 214.In these examples, data space 225 is that 206 and process control are applied in process control
The space that the process of device manager 224 can read and write.In this way, example process control can be calculated using 206
Can as used in the process of device controller manager 224 process data.For example, process control can be calculated using 206
Controlling value, the valve that will be used for controlling manager 224 to device is controlled.In some such examples, Ke Yiyou
Application manager 222 relaxes the access to data space 225 by permissions data.In some instances, in order to prevent read/
Write-in conflict, the access to data space 225 is controlled by semaphore (semaphore).In some such examples, letter
Number amount prevent process control using 206 when editing equipment management device 224 writes to data space 225 from data space
225 read and/or prevent editing equipment management device 224 when process control writes using 206 to data space 225 from number
Read according to space 225.
Exemplary application manager 222 based on make the process control of request using 206 associated permissions datas come
The request to access physical resource 208 is refused in license.In the illustrated example, in order to prevent process control using 206 change
Permissions data, the part isolated with application space 204 in memory 212 and/or holder 214 is stored in by permissions data
In.For example, if process control will send message using 206 to main frame 114, application manager 222 is checked and process control
Using 206 associated permissions datas, controlled with determination process using 206 authorities whether with the I/O218 for accessing bus.
If application manager 222 permits the request, application manager 222 is using process control using the parameter (example specified by 206
Such as, message, value of control signal etc.) carry out corresponding function call.If for example, process control has really using 206
Authority transmits the message to main frame 114, then application manager 222 carries out appropriate function call.For another example, if mistake
The value of the position sensor on the valve of automation equipment 104,106 is read in process control using 206 requests, then application manager 222
Value (for example, to the firmware requests value) is fetched, and the value is passed into process control and applies 206.
Fig. 3 shows that being used in Fig. 2 applies 206 (Fig. 2) to the process control performed in application space 204 (Fig. 2)
The implementation for the exemplary application manager 222 being managed.Exemplary application manager 222 includes example rights management
Device 300, exemplary erector 302 and exemplary application framework processor 304.In the illustrated example, when process control should
When accessing (for example, via library function call, via hook etc.) with 206 requests, rights manager 300 is determined in application space
Whether the Process flowchart performed in 204 has permission to access specific physical resource 208 (Fig. 2) using 206.It is true in order to make this
Fixed, example rights management device 300 fetches permissions data from memory 212 (Fig. 2) and/or storage facilities 214 (Fig. 2).
When process control is accessed using 206 requests, example rights management device 300 is by the access asked and authority number
According to being compared.If for example, process control carries out function calls to incite somebody to action via automation equipment I/O 220 (Fig. 2) using 206
Control signal is sent to automation equipment 104,106, then rights manager 300 determines whether associated permissions data indicated
Process control is able to access that automation equipment I/O 220 using 206.If permissions data indicates that process control has power using 206
Limit accesses asked physical resource 208, then example rights management device 300 allows corresponding function call to proceed.
In some instances, the control process of rights manager 300 control is able to access that specific physical resource using 206
208 frequency.For example, rights manager 300 can allow process control only to transmit the message to master to once per second using 206
Machine 114 (Fig. 1), to prevent process control from being performed by accident or maliciously to system controller 110 (Fig. 1) and/or master using 206
The refusal service formula attack of machine 114.
Exemplary erector 302 management process control is installed and uninstalled using 206.Exemplary erector 302 is via total
Line I/O 218 (Fig. 2) receives example process control from main frame 114 and applies 206 and corresponding permissions data.It is exemplary to install
Process control is copied in memory 212 and/or storage facilities 214 and is provided for application space by device 302 using 206
204 part.In some instances, the quilt that erector 302 copies to permissions data in memory 212 and/or holder 214
Part for permissions data is provided.Then exemplary erector 302 notifies the mistake about installing to application framework processor 304
206 starting position is applied in process control, and notifies the position about permissions data to rights manager 300.
In Fig. 3 example shown, application framework processor 304 controls installed process control to be held using 206
OK.In some instances, application framework processor 304 essentially continuously performs installed process control and applies 206.In addition
Ground or alternatively, in some instances, application framework processor 304 was performed a plurality of times program control in response to event and/or triggering
System applies 206.For example, when the valves are closed or when detecting fault state, application framework processor 304 can be with implementation procedure control
System applies 206.Application framework processor 304 is that process control is dispatched to processor (for example, Fig. 2 processor 210) using 206
Access.In some instances, the control of the interpretation process of application framework processor 304 applies 206 (for example, when process control application
206 when being script).Process control is allowed to apply 206 access equipment controllers 108 in addition, application framework processor 304 is provided
Physical resource 208 storehouse and/or hook.If set for example, process control will send control signals to automation using 206
Standby 104,106, then process control includes the automation equipment I/O functions to being included in application framework processor 304 using 206
Call.Function call is allowed to proceed (for example, excessively program control or application framework processor 304 combines rights manager 300
System is using 206 associated with corresponding authority) otherwise ignore function call (for example, process control apply 206 not with it is corresponding
Authority be associated).In this way, application manager 222 relaxes the access to physical resource 208.
Although figure 3 illustrates the exemplary approach for the exemplary application manager 222 for realizing Fig. 2, being shown in Fig. 3
One or more of element, process and/or equipment can be combined, divide, rearranging, omitting, cancelling and/or to appoint
What other manner is realized.In addition, example rights management device 300, exemplary erector 302, exemplary application framework are handled
Device 304 and/or more generally Fig. 2 exemplary application manager 222 can by hardware, software, firmware and/or hardware, software,
Any combinations of firmware are realized.Thus, for example example rights management device 300, exemplary erector 302, exemplary application
Any one in framework processor 304 and/or more generally exemplary application manager 222 can be by one or more simulations
Or digital circuit, logic circuit, programmable processor, application specific integrated circuit (ASIC), PLD (PLD) and/or
Field programmable logic device (FPLD) is realized.When read this patent in cover pure software and/or firmware realization side
During any one in the device or system claims of formula, example rights management device 300, exemplary erector 302 and/or
At least one in exemplary application framework processor 304 is so it is to include storage software and/or firmware to be clearly defined
The readable storage facilities of tangible computer or storage disk, such as memory, digital versatile disc (DVD), compact disk (CD), Blu-ray disc
Deng.In addition, in addition to those elements, process and/or the equipment that are shown in Fig. 3 or alternatively, the exemplary of Fig. 2 should
It can include one or more elements, process and/or equipment with manager 222, and/or shown element, mistake can be included
More than one in any or whole element, process and equipment in journey and equipment.
Shown in Fig. 4 and/or Fig. 5 and represent to be used to realize the example of Fig. 2 and Fig. 3 exemplary application manager 222
The flow chart of property method.In these examples, can use by processor (for example, below in conjunction with Fig. 6 discussed it is exemplary
The processor 210 shown in reason device platform 600) program that performs realizes methods described.Program, which may be embodied in, to be stored in
Shape computer-readable storage media (for example, CD-ROM, floppy disk, hard disk drive, digital versatile disc (DVD), Blu-ray disc or
Person's memory associated with processor 210) on software in, but whole program and/or its part can alternatively by except
Equipment outside processor 210 is performed and/or included in firmware or specialized hardware.Although in addition, with reference to Fig. 4 and/
Or the flow chart shown in Fig. 5 describes exemplary process, but can be alternatively using implementation example application manager 222
Many other methods.For example, thus it is possible to vary the execution sequence of frame, and/or it can change, cancel or combine in described frame
Some frames.
As mentioned above, Fig. 4 and/or Fig. 5 illustrative methods, which can be used, is stored in the readable storage of tangible computer
Deposit medium (such as hard disk drive, flash memory, read-only storage (ROM), compact disk (CD), digital versatile disc (DVD), high speed
Caching, random access memory (RAM) and/or information store any duration (for example, period of extension, forever wherein
Long, briefly, interim buffering, and/or to the cache of information) any other storage facilities or storage disk) on warp
The instruction (for example, computer and/or machine readable instructions) of coding is realized.As it is used herein, term tangible computer
It is to include any kind of computer-readable storage facilities and/or storage disk that readable storage medium, which is clearly defined, and not
Transmission medium is not included including transmitting signal and.As it is used herein, " the readable storage medium of tangible computer " and " tangible
Machine-readable storage medium " is used interchangeably.Additionally or alternatively, Fig. 4 and/or Fig. 5 illustrative methods can be used and deposited
Storage is in non-transitory computer and/or machine readable media (for example, hard disk drive, flash memory, read-only storage, compact disk, number
Word versatile disc, cache, random access memory and/or information store wherein any duration (for example, extension
Period, for good and all, briefly, interim buffering, and/or to the cache of information) any other storage facilities or storage
Disk) on encoded instruction (for example, computer and/or machine readable instructions) realize.As it is used herein, term is non-
It is to include any kind of computer-readable storage facilities and/or storage that temporary computer-readable storage media, which is clearly defined,
Deposit, and do not include transmitting signal and do not include transmission medium.As it is used herein, when phrase " at least " is used as right
It is required that preamble in transitional term when, it is open, is that open mode is identical with term " comprising ".
Fig. 4 is to represent to be performed to realize Fig. 2 and Fig. 3 application manager 222 to perform device controller 108
The flow chart of 206 (Fig. 2) illustrative methods 400 is applied in example process control on (Fig. 1 and Fig. 2).Device controller pipe
Reason device 224 is communicated with system controller 110 (Fig. 1) and/or main frame 114 (Fig. 1), with Process Control System 100 (Fig. 1)
Middle offer device controller 108 (frame 402).In some instances, in order to provide device controller 108, device controller is managed
Device 224 provides the configuration information of device controller 108 and/or corresponding automation equipment 104,106 (Fig. 1) (for example, equipment
Description file, device controller identifier, automation equipment identifier, universal device information, scope configuration information, sensor/
Actuator parameters and/or tolerance etc.).
The process control received from main frame 114 is installed to device controller 108 by application manager 222 using 206
In application space 204 (frame 404).For example, application manager 222 can by process control using 206 be placed in memory 202 and/
Or being specified in the part of application space 204 in storage facilities 214.Rights manager 300 will be received from main frame 114
Be installed to process control using 206 associated permissions datas it is designated in memory 212 and/or storage facilities 214
Used in the part (for example, authority memory) of permissions data (frame 406).Application manager 222 and then management process control should
With 206 execution (frame 408).In some instances, the interpretation process of application manager 222 control applies 206.
Application manager 222 also relaxes access of the process control using the physical resource 208 of 206 pairs of device controllers 108
(frame 410).If for example, process control using 206 request access (for example, via library function call, via scripting hooks etc.),
Then application manager 222 using with process control using 206 associated permissions datas come determination process control using 206 whether
Specific physical resource 208 can be accessed.In addition, in order to relax access, application manager 222 prevents process control from applying 206
It is read out or writes to the memory 212 and/or storage facilities 214 that are not defined for application space 204.
Fig. 5 is to represent to be performed to realize Fig. 2 and Fig. 3 application manager 222 to relax example process control
Using illustrative methods 500 of 206 (Fig. 2) to the access of the physical resource 208 (Fig. 2) of device controller 108 (Fig. 1 and Fig. 2)
Flow chart.206 execution (frame 502) is applied in application framework processor 304 (Fig. 3) management process control.For example, application framework
Starting position in memory 212 (Fig. 2) using 206 and/or is loaded into processor 210 by the control of the interpretation process of processor 304
In the program counter of (Fig. 2).Whether the control of the determination process of application framework processor 304 is asked to physical resource 208 using 206
Access (for example, via library function call, via scripting hooks etc.) (frame 504).
If access of the process control using 206 requests to physical resource 208, rights manager 300 (Fig. 3) was determined
Whether process control has the specific physical resource 208 (frame 506) of permission to access using 206.In order to make the determination, rights management
Device 300 is checked applies 206 associated permissions datas with specific process control.If process control has really using 206
Authority accesses specific physical resource 208, then application framework processor 304 transmits the request (for example, via built-in function etc.)
To specific physical resource 208 (frame 508).If process control accesses specific physical resource using 206 without authority
208, then application framework processor 304 ignore the request (frame 510).In some instances, the setting of application framework processor 304 mark
Will and/or send message to main frame 114 to indicate that process control is attempted to access its and there is not the physical resource of permission to access using 206
208。
Application framework processor 304 determines whether to continue executing with process control using 206 (frames 512).If application framework
Processor 304 will continue executing with process control and apply 206, then process 500 is back to frame 502.Otherwise, process 500 terminates.
Fig. 6 be configured to perform Fig. 4 and Fig. 5 method with realize Fig. 1 and Fig. 2 example devices controller 108 and/
Or the block diagram of the example processor platform 600 of Fig. 2 and Fig. 3 exemplary application manager 222.Processor platform 600 includes
The physical resource 208 in fig. 2 of device controller 108.
Processor platform 600 in shown example includes processor 210.Processor 210 in shown example
It is hardware.For example, processor 210 can with origin from one or more integrated circuits of any desired family or manufacturer, patrol
Circuit, microprocessor or controller is collected to realize.
Processor 210 in shown example includes local storage 602 (for example, cache).Shown shows
Processor 210 in example is via bus 604 with including volatile memory 212a and nonvolatile memory 212b primary storage
Device is communicated.Volatile memory 212a can be deposited by Synchronous Dynamic Random Access Memory (SDRAM), dynamic randon access
The random access memory of reservoir (DRAM), RAMBUS dynamic random access memory (RDRAM) and/or any other type is set
It is standby to realize.Nonvolatile memory 212b can be realized by the memory devices of flash memory and/or any other desired type.
Access to main storage 212a, 212b is controlled by Memory Controller.Can be volatile memory 212a and/or great Rong
The section for measuring storage facilities 214 limits application space 204.
The processor platform 600 of shown example also includes bus I/O 218 and automation equipment 220.Bus I/O
218 and automation equipment I/O 220 can by any kind of interface standard (for example, Foundation Fieldbus,
Profibus, Hart bus, Ethernet interface, USB (USB), and/or PCI high-speed interfaces) realize.
In some instances, processor platform 600 includes interface circuit 606, and interface circuit 606 can be set including communication
It is standby, such as emitter, receiver, transceiver, modem and/or NIC, with promote via network 608 (for example,
Ethernet connection, Digital Subscriber Line (DSL), telephone wire, coaxial cable, cell phone system etc.) and external mechanical (for example, times
The computing device of what type) data exchange.
Processor platform 600 in shown example also includes being used for storing the one or more of software and/or data
Mass storage device 214.The example of this mass storage device 214 includes floppy disk, hard disk drive or appointed
Storage medium that what it is adapted to.
The encoded instruction 610 of method for realizing Fig. 4 and Fig. 5 can be stored in storage facilities 214, volatibility
In memory 212a, in nonvolatile memory 212b, and/or such as CD or DVD etc removable tangible computer it is readable
On storage medium.
In some instances, processor platform 600 includes the biography that can be separated with the sensor of automation equipment 104,106
Sensor 216 (for example, temperature sensor, humidity sensor, accelerometer etc.).In some such examples, sensor 216 can be used
Situation and/or detection abnormal behaviour (for example, fault detect, theft detection etc.) around supervision equipment controller 108.
Although having been disclosed for some illustrative methods, device and product herein, the covering scope of this patent is not limited
In this.On the contrary, this patent covers all methods, device and the product fallen completely within the range of the claim of this patent.
Claims (20)
1. a kind of automation equipment that will be arranged in Process Control System, it is characterised in that the automation equipment includes：
Device controller is communicably coupled to main frame, the master by device controller manager, the device controller manager
Machine provides the device controller and automation equipment in Process Control System；
Process control application is installed in the application space in the firmware of the device controller by erector, the erector,
The process control application is provided with permissions data；
Application framework processor, the application framework processor is configured as：
The process control application in the application space is performed, the work(to the device controller is applied in the process control
It can be extended；And
Relax the process control and apply the access to the physical resource of the device controller, the permissions data limits described
Process control is applied with the access to which of physical resource physical resource.
2. automation equipment according to claim 1, it is characterised in that applied to relax the process control to described
The access of the physical resource of device controller, the application framework processor is configured as keeping and the device controller
The application memory space of interior firmware memory space separation, wherein, the process control, which is applied, to be had to application memory sky
Between access, but without access to the firmware memory space.
3. automation equipment according to claim 1, it is characterised in that applied to relax the process control to described
The access of the physical resource of device controller, the application framework processor is configured as carrying to the process control application
For the access of the network service to the device controller, the permissions data specify the process control application can with it is described
The frequency that main frame is communicated.
4. automation equipment according to claim 1, it is characterised in that applied to relax the process control to described
The access of the physical resource of device controller, the application framework processor is configured as carrying to the process control application
For the access of the automation equipment communication to the device controller, the permissions data specifies the process control application can
The frequency communicated with the automation equipment.
5. automation equipment according to claim 4, it is characterised in that the permissions data is specified to the process control
Using when the logical condition that is adjusted of communicating can be carried out with the automation equipment.
6. automation equipment according to claim 1, it is characterised in that applied to relax the process control to described
The access of the physical resource of device controller, the application framework processor is configured as：
Data space is kept, the process control application write data into the data space with the equipment control
The firmware of device processed is shared；And
The process control is relaxed based on the permissions data using the access to the data space.
7. automation equipment according to claim 6, it is characterised in that the process control application is under situations below
At least one provide：There is provided when installing the process control and applying by the main frame；Or when the manufacture equipment
There is provided during controller by manufacturer.
8. a kind of device controller, the device controller is related to the automation equipment that will be arranged in Process Control System
Connection, it is characterised in that the device controller includes：
The device controller is communicably coupled to main frame by device controller manager, the device controller manager, institute
The device controller and the automation equipment in the main frame offer Process Control System is provided；
Process control application is installed in the application space in the firmware of the device controller by erector, the erector,
The process control is applied provides permissions data by the main frame；
Application framework processor, the application framework processor is used for：
The process control application in the application space is performed, the work(to the device controller is applied in the process control
It can be extended；And
Relax the process control and apply the access to the physical resource of the device controller, the permissions data, which is defined, to be used for
Relax the rule that the access to the physical resource of the device controller is applied in the process control.
9. device controller according to claim 8, it is characterised in that applied to relax the process control to described
The access of the physical resource of device controller, the application framework processor is kept and the firmware in the device controller
The application memory space of memory space separation, wherein, the process control is applied with the access to the application memory space,
But without the access to the firmware memory space.
10. device controller according to claim 8, it is characterised in that applied to relax the process control to institute
The access of the physical resource of device controller is stated, the application framework processor is provided to institute to process control application
The access of the network service of device controller is stated, the permissions data specifies the process control application to enter with the main frame
The frequency of row communication.
11. device controller according to claim 8, it is characterised in that applied to relax the process control to described
The access of the physical resource of device controller, the application framework processor is provided to described to process control application
Device controller automation equipment communication access, the permissions data specify the process control application can with it is described from
The frequency that dynamicization equipment is communicated.
12. device controller according to claim 11, it is characterised in that the permissions data is specified to described excessively program control
System applies the logical condition being adjusted that when with the automation equipment can communicate.
13. device controller according to claim 8, it is characterised in that applied to relax the process control to institute
The access of the physical resource of device controller is stated, the application framework processor keeps data space, the process control
Using writing data into the data space with shared with the firmware of the device controller.
14. device controller according to claim 13, it is characterised in that applied to relax the process control to institute
The access of the physical resource of device controller is stated, the application framework processor relaxes described based on the permissions data
Process control is using the access to the data space.
15. a kind of automation equipment, it is characterised in that the automation equipment includes：
Set described in unit for device controller to be communicably coupled to main frame, the main frame offer Process Control System
Preparation controller and automation equipment；
For the unit being installed to process control application in the application space in the firmware of the device controller, the process
Control application provides permissions data by the main frame；
Unit for performing the application of the process control in the application space, the process control is applied to the equipment
The function of controller is extended；And
The unit of the access to the physical resource of the device controller, the authority number are applied for relaxing the process control
It is used to relax the rule that the access to the physical resource of the device controller is applied in the process control according to definition.
16. automation equipment according to claim 15, it is characterised in that described to be used to relax the process control application
The device controller is kept and the equipment control unit of the access of the physical resource of the device controller
The application memory space of firmware memory space separation in device processed, wherein, the process control is applied to have and the application is deposited
The access in space is stored up, but without the access to the firmware memory space.
17. automation equipment according to claim 15, it is characterised in that described to be used to relax the process control application
Cause the device controller should to the process control unit of the access of the physical resource of the device controller
With the access provided to the network service of the device controller, the permissions data specifies the process control application can be with
The frequency that the main frame is communicated.
18. automation equipment according to claim 15, it is characterised in that described to be used to relax the process control application
Cause the device controller should to the process control unit of the access of the physical resource of the device controller
The access communicated with the automation equipment provided to the device controller, the permissions data specifies the process control application
The frequency that can be communicated with the automation equipment.
19. automation equipment according to claim 18, it is characterised in that the permissions data is specified to described excessively program control
System applies the logical condition being adjusted that when with the automation equipment can communicate.
20. automation equipment according to claim 15, it is characterised in that the device controller is configured as keeping number
According to space, and the process control application be configured as writing data into the data space with the device controller
The firmware share.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US14/734,399 | 2015-06-09 | ||
| US14/734,399 US20160363919A1 (en) | 2015-06-09 | 2015-06-09 | Custom application environment in a process control device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN206532131U true CN206532131U (en) | 2017-09-29 |
Family
ID=56194595
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610404083.XA Active CN106249706B (en) | 2015-06-09 | 2016-06-08 | Customized application environment in process control device |
| CN201620553955.4U Active CN206532131U (en) | 2015-06-09 | 2016-06-08 | Automation equipment, device controller and automation equipment in Process Control System will be arranged on |
Family Applications Before (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610404083.XA Active CN106249706B (en) | 2015-06-09 | 2016-06-08 | Customized application environment in process control device |
Country Status (6)
| Country | Link |
|---|---|
| US (1) | US20160363919A1 (en) |
| EP (1) | EP3308269A1 (en) |
| CN (2) | CN106249706B (en) |
| CA (1) | CA2988765A1 (en) |
| RU (1) | RU2733088C1 (en) |
| WO (1) | WO2016201019A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106249706A (en) * | 2015-06-09 | 2016-12-21 | 费希尔控制产品国际有限公司 | Customized application environment in process control equipment |
| CN110598412A (en) * | 2018-06-12 | 2019-12-20 | 杨力祥 | Method and computing device for isolating power information and checking power based on power information |
| CN110781491A (en) * | 2019-10-25 | 2020-02-11 | 苏州浪潮智能科技有限公司 | Method and device for controlling process to access file |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108459563B (en) * | 2017-02-17 | 2022-05-17 | 西门子公司 | Method, device and system for processing field data |
| DE102018100657A1 (en) * | 2018-01-12 | 2019-07-18 | Wago Verwaltungsgesellschaft Mbh | Automation device and method for operating an automation device |
| US10698816B2 (en) | 2018-06-29 | 2020-06-30 | Micron Technology, Inc. | Secure logical-to-physical caching |
Family Cites Families (19)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US4086568A (en) * | 1975-04-07 | 1978-04-25 | Public Service Company Of Colorado | Modular I/O equipment for controlling field devices directly or as an interface |
| CN1244033C (en) * | 1996-10-04 | 2006-03-01 | 费希尔控制产品国际有限公司 | Process control network with redundant field devices and busses |
| US7290072B2 (en) * | 1999-10-06 | 2007-10-30 | Igt | Protocols and standards for USB peripheral communications |
| AU2002254547A1 (en) * | 2001-04-05 | 2002-10-21 | Fisher Controls International Llc | System to manually initiate an emergency shutdown test and collect diagnostic data in a process control environment |
| CN1556959A (en) * | 2001-08-13 | 2004-12-22 | �����ɷ� | Using permissions to allocate device resources to an application |
| US7350115B2 (en) * | 2003-12-18 | 2008-03-25 | Intel Corporation | Device diagnostic system |
| US11582065B2 (en) * | 2007-06-12 | 2023-02-14 | Icontrol Networks, Inc. | Systems and methods for device communication |
| US8230426B2 (en) * | 2004-10-06 | 2012-07-24 | Digipede Technologies, Llc | Multicore distributed processing system using selection of available workunits based on the comparison of concurrency attributes with the parallel processing characteristics |
| US7506090B2 (en) * | 2006-06-14 | 2009-03-17 | Honeywell International Inc. | System and method for user-configurable resource arbitration in a process control system |
| US20080046997A1 (en) * | 2006-08-21 | 2008-02-21 | Guardtec Industries, Llc | Data safe box enforced by a storage device controller on a per-region basis for improved computer security |
| US8234506B2 (en) * | 2006-10-08 | 2012-07-31 | International Business Machines Corporation | Switching between unsecure system software and secure system software |
| KR101489244B1 (en) * | 2007-12-24 | 2015-02-04 | 삼성전자 주식회사 | System and method for controlling program execution based on virtual machine monitor |
| US9003387B2 (en) * | 2009-09-25 | 2015-04-07 | Fisher-Rosemount Systems, Inc. | Automated deployment of computer-specific software updates |
| US8411588B2 (en) * | 2009-11-09 | 2013-04-02 | Research In Motion Limited | Methods and apparatus to manage wireless device power consumption |
| KR101626424B1 (en) * | 2011-03-28 | 2016-06-01 | 맥아피 인코퍼레이티드 | System and method for virtual machine monitor based anti-malware security |
| US9182757B2 (en) * | 2011-03-30 | 2015-11-10 | Fisher-Rosemount Systems, Inc. | Methods and apparatus to transmit device description files to a host |
| US9449185B2 (en) * | 2011-12-16 | 2016-09-20 | Software Ag | Extensible and/or distributed authorization system and/or methods of providing the same |
| US9183391B2 (en) * | 2013-03-13 | 2015-11-10 | Intel Corporation | Managing device driver cross ring accesses |
| US20160363919A1 (en) * | 2015-06-09 | 2016-12-15 | Fisher Controls International Llc | Custom application environment in a process control device |
-
2015
- 2015-06-09 US US14/734,399 patent/US20160363919A1/en not_active Abandoned
-
2016
- 2016-06-08 CN CN201610404083.XA patent/CN106249706B/en active Active
- 2016-06-08 CN CN201620553955.4U patent/CN206532131U/en active Active
- 2016-06-09 RU RU2017145378A patent/RU2733088C1/en active
- 2016-06-09 CA CA2988765A patent/CA2988765A1/en not_active Abandoned
- 2016-06-09 WO PCT/US2016/036550 patent/WO2016201019A1/en active Application Filing
- 2016-06-09 EP EP16731733.8A patent/EP3308269A1/en not_active Ceased
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106249706A (en) * | 2015-06-09 | 2016-12-21 | 费希尔控制产品国际有限公司 | Customized application environment in process control equipment |
| CN106249706B (en) * | 2015-06-09 | 2021-01-01 | 费希尔控制产品国际有限公司 | Customized application environment in process control device |
| CN110598412A (en) * | 2018-06-12 | 2019-12-20 | 杨力祥 | Method and computing device for isolating power information and checking power based on power information |
| CN110598412B (en) * | 2018-06-12 | 2021-12-14 | 杨力祥 | Method and computing device for isolating power information and checking power based on power information |
| CN110781491A (en) * | 2019-10-25 | 2020-02-11 | 苏州浪潮智能科技有限公司 | Method and device for controlling process to access file |
| CN110781491B (en) * | 2019-10-25 | 2022-02-18 | 苏州浪潮智能科技有限公司 | Method and device for controlling process to access file |
Also Published As
| Publication number | Publication date |
|---|---|
| US20160363919A1 (en) | 2016-12-15 |
| WO2016201019A1 (en) | 2016-12-15 |
| CN106249706A (en) | 2016-12-21 |
| EP3308269A1 (en) | 2018-04-18 |
| CA2988765A1 (en) | 2016-12-15 |
| CN106249706B (en) | 2021-01-01 |
| RU2733088C1 (en) | 2020-09-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN206532131U (en) | Automation equipment, device controller and automation equipment in Process Control System will be arranged on | |
| US10985973B2 (en) | System for connecting and controlling multiple devices | |
| CN102736581B (en) | Methods and apparatus to transmit device description files to host | |
| JP6904639B2 (en) | Background collection of diagnostic data from field instrumentation | |
| JP6806437B2 (en) | Process plant network with secure external access | |
| EP3192235B1 (en) | Device synchronization and testing | |
| US20180234519A1 (en) | Managing device profiles in the internet-of-things (iot) | |
| EP2907102B1 (en) | Field device having tamper attempt reporting | |
| CA2914738A1 (en) | Methods and apparatus to manage and maintain process control system field devices using rfid devices | |
| CN104169817B (en) | Control device for controlling safety-critical processes and method for parameterizing the control device | |
| US11914360B2 (en) | Methods and apparatus to implement safety applications associated with process control systems | |
| CN110178117A (en) | Control device | |
| WO2020112187A1 (en) | Centralized management of containerized applications deployed on distributed gateways | |
| JP5862614B2 (en) | Field device and data processing method | |
| CN103425092A (en) | Methods and systems to provide update information of a device description of a field instrument | |
| US20180129793A1 (en) | Precompile and encrypt industrial intellectual property | |
| US10649879B2 (en) | Integration of diagnostic instrumentation with machine protection system | |
| US11561525B2 (en) | Flexible condition monitoring of industrial machines | |
| JP6039464B2 (en) | Device management apparatus and device management method | |
| US9336181B2 (en) | Retrieval of measured values, diagnostic information or device parameters | |
| CN103257629B (en) | The method and apparatus of triggering limitations multiple to the equipment application in Process Control System | |
| CN111741461B (en) | Rights granting for field devices | |
| JP6381324B2 (en) | Auxiliary storage device and auxiliary storage method | |
| CN118759973A (en) | Nuclear power plant indoor environment monitoring method and system, electronic equipment and storage medium | |
| JP2016201603A (en) | Unauthorized communication inspection apparatus and communication system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| GR01 | Patent grant | ||
| GR01 | Patent grant |